Client Vulnerability Lead

Michael Page; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Michael Page is seeking a security engineering lead to implement and manage Defender for Endpoint across Windows, macOS and Linux, with strong Intune experience and vulnerability management oversight.

The role requires leadership of cross-functional teams, hands-on configuration, and a deep understanding of Windows internals and endpoint artifacts on all major platforms. You will collaborate with IT operations and engineering to remediate risks.

Qualifications

• 5+ years leading security teams and projects.
• 5+ years with Defender for Endpoint or equivalent EDR.
• 5+ years vulnerability management for endpoints.
• 3+ years managing Microsoft Intune.
• Strong Windows internals knowledge.
• Remediation packages in Intune or SCCM and Windows OS.

Responsibilities

• Implement, configure, and maintain Defender for Endpoint across Windows, macOS, and Linux.
• Operate ASR, AppLocker/WDAC, Controlled Folder Access and EDR remediation features.
• Run vulnerability management lifecycle: scans, triage, remediation, and reporting.
• Deploy and manage Intune integration with Defender to ensure posture.
• Collaborate with patch management, IT operations, and engineering to remediate risks.

Skills

Team leadership

Defender for Endpoint

Vulnerability management

Intune management

Windows internals

macOS/Linux endpoint artifacts

PowerShell scripting

Analytical problem-solving

Job description

Role & responsibilities

• Implement, configure, and maintain Microsoft Defender for Endpoint across Windows, macOS, and Linux endpoints, including onboarding, configuration baselines, and policy management.
• Operate MDE features such as attack surface reduction (ASR), application control (e.g., AppLocker/WDAC policies), Controlled Folder Access, Exploit Protection, and EDR-managed remediation.
• Run and manage the vulnerability management lifecycle for endpoints: scan scheduling, authenticated scanning, triage of findings, exploitability assessment, prioritization, SLA assignment, remediation coordination, verification, and reporting.
• Deploy, configure, and manage Microsoft Intune (device enrolment, configuration profiles, compliance policies, device compliance reporting, app protection, conditional access posture) to ensure endpoint security posture and integration with Defender.
• Collaborate closely with patch management, IT operations, application owners, and engineering teams to drive remediation, validate fixes, and close risk gaps.

Preferred candidate profile

• Must Have team leading experience
• 5+ years Microsoft Defender for Endpoint or equivalent EDR platform (deployment, configuration, hunting, investigations, automated response).
• 5+ years practical experience in vulnerability management for endpoints (scanning, triage, prioritization, remediation coordination).
• 3+ years experience managing Microsoft Intune (device enrolment, configuration profiles, compliance policies, application protection, conditional access integration).
• Advanced knowledge of Windows internals (processes, services, registry, event/log structures) and good exposure to macOS and Linux endpoint artifacts.
• Deep knowledge of endpoint & Strong analytical and problem-solving skills.
• Understanding of remediation packages in Intune or SCCM & Windows OS
• Scripting and automation knowledge - preferred PowerShell.